Check an IP Address, Domain Name, Subnet, or ASN

85.237.46.251 was found in our database!

$ whois 85.237.46.251

country·🇷🇺 Russia

city·Penza

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 85.237.46.251scoring →

confidence

40%Medium

first_seen·Jan 23, 2026

last_seen·1h ago

sessions·243

events·243

$ sikker protocols 85.237.46.251

SMB

243 / 243

$ sikker summary 85.237.46.251

85.237.46.251 has a threat confidence score of 40%. This IP address from Russia (AS12389, Rostelecom) has been observed in 243 honeypot sessions targeting SMB protocols. First observed on January 23, 2026, most recently active March 21, 2026.

$ sikker related 85.237.46.251

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
178.185.136.57	100%	1,026
89.109.13.197	27%	91
95.188.77.140	29%	108
2.63.211.145	79%	19,944
85.173.126.84	22%	36

IP Address	Confidence	Events
178.185.136.57	100%	1,026
77.50.253.124	67%	54
92.244.229.7	29%	81
89.109.13.197	27%	91
93.178.107.25	26%	65